$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/98438B98677F11EA972EEA2EC4F9AE02.roa File: 98438B98677F11EA972EEA2EC4F9AE02.roa (raw, json) Hash identifier: vgXVDEq6fY1aAocc5HR3NJ+0QWxdFIUgmDfdg3s0DS4= Subject key identifier: 6E:45:EB:53:A8:BE:B2:71:D8:6D:EE:C7:92:50:2F:8C:D4:80:C3:19 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0965 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/98438B98677F11EA972EEA2EC4F9AE02.roa Signing time: Wed 28 Feb 2024 20:59:11 +0000 ROA not before: Wed 28 Feb 2024 20:59:11 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138582 IP address blocks: 103.133.172.0/22 maxlen: 22 103.133.172.0/24 maxlen: 24 103.133.173.0/24 maxlen: 24 103.133.174.0/24 maxlen: 24 103.133.175.0/24 maxlen: 24 2404:5140::/32 maxlen: 32 2404:5140::/48 maxlen: 48 2404:5140:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: Feb 28 20:59:11 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65df9e9f-9085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:66:ca:03:7d:71:f1:56:3d:e2:c3:b6:0b:c1: b0:f0:e4:0c:db:48:81:21:57:2e:38:c4:d5:90:3a: a3:15:ac:83:f2:15:c5:e1:19:d5:da:81:51:b2:6e: 34:33:93:21:03:dd:0d:3f:5e:77:01:39:be:4e:34: 03:7c:5b:85:aa:10:f5:c6:64:76:3f:4c:ec:a3:f5: bf:72:6f:d5:6a:46:9f:cf:96:b4:c2:c3:56:4e:cc: 3f:b5:69:56:8e:61:1a:f4:d7:b1:25:c7:0c:77:bc: 35:17:bf:48:45:8a:71:98:a9:07:b6:c9:e0:7d:be: 1a:87:92:ef:53:a8:3d:fa:f0:4a:7a:24:80:a6:bc: 1e:0d:db:c6:99:26:56:e5:b2:04:b4:60:fb:21:54: 18:2b:74:a5:5b:75:04:08:bd:48:58:79:5b:a2:4a: 5c:a1:7e:c4:35:83:41:99:86:0f:ce:20:18:be:35: 97:73:33:a2:64:15:7f:e0:85:cd:f7:75:b4:a3:0d: bf:ed:55:9c:58:17:d7:27:90:ea:9f:02:e8:f3:96: 1f:a7:b5:1c:75:f8:06:cd:59:2c:fa:99:7a:70:e9: 64:74:bc:27:f1:95:63:97:20:df:23:35:b0:49:ed: 8f:5a:03:cb:a9:e9:23:72:65:f0:d9:f6:fa:2d:98: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:45:EB:53:A8:BE:B2:71:D8:6D:EE:C7:92:50:2F:8C:D4:80:C3:19 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/98438B98677F11EA972EEA2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.172.0/22 IPv6: 2404:5140::/32 Signature Algorithm: sha256WithRSAEncryption 38:52:ac:77:b1:f5:6c:29:00:28:f9:39:5b:4f:22:ed:76:3c: 96:1e:91:ad:01:53:98:13:1a:99:f8:a6:47:7b:e4:23:68:4c: f9:f7:9d:ba:a3:4c:cd:0a:21:b6:8d:4f:26:62:ab:0c:11:3e: 2b:b0:ce:ef:f7:20:9a:d1:a6:69:76:7f:0f:e7:9d:aa:30:59: 16:d3:d4:d9:d6:29:5d:35:d9:f7:17:2c:65:f9:1e:5f:4c:c7: 9d:b9:60:a0:65:cb:b4:0c:9a:ec:aa:55:e1:ad:fb:67:5b:a0: 3a:b3:f0:6d:5a:20:b2:4d:d5:ad:38:72:5a:60:6d:82:72:82: 26:3a:76:63:c8:ac:eb:bf:8a:42:61:d0:8b:31:de:51:a8:d2: 94:99:0b:b0:37:db:65:d9:b3:b0:65:40:2d:7b:ee:d7:ef:03: eb:f5:50:cf:c0:e0:f3:21:88:57:20:80:fd:72:46:c1:bd:45: 52:30:a5:59:d3:04:21:29:cd:47:de:14:55:5c:4a:5b:43:31: e5:5c:a9:87:f7:2a:92:81:6f:8e:6a:98:cd:66:b0:b8:05:2b: 64:87:90:83:18:56:4a:cd:04:53:60:6f:8c:cc:e9:ff:ca:41: b1:91:e1:10:da:50:84:5a:6f:ab:19:01:32:5e:37:8b:67:ce: 09:68:36:53 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjQwMjI4MjA1OTExWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRmOWU5Zi05MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72bKA31x8VY94sO2C8Gw8OQM20iBIVcuOMTVkDqjFayD8hXF4RnV2oFRsm40 M5MhA90NP153ATm+TjQDfFuFqhD1xmR2P0zso/W/cm/Vakafz5a0wsNWTsw/tWlW jmEa9NexJccMd7w1F79IRYpxmKkHtsngfb4ah5LvU6g9+vBKeiSAprweDdvGmSZW 5bIEtGD7IVQYK3SlW3UECL1IWHlbokpcoX7ENYNBmYYPziAYvjWXczOiZBV/4IXN 93W0ow2/7VWcWBfXJ5DqnwLo85Yfp7UcdfgGzVks+pl6cOlkdLwn8ZVjlyDfIzWw Se2PWgPLqekjcmXw2fb6LZiflQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFG5F61Oo vrJx2G3ux5JQL4zUgMMZMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTBCRUMvN0I3RjI4RTI2NzdFMTFFQThCRDgyNjJEQzRGOUFFMDIvOTg0MzhCOTg2 NzdGMTFFQTk3MkVFQTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhawwDQQCAAIwBwMFACQEUUAwDQYJKoZIhvcNAQELBQAD ggEBADhSrHex9WwpACj5OVtPIu12PJYeka0BU5gTGpn4pkd75CNoTPn3nbqjTM0K IbaNTyZiqwwRPiuwzu/3IJrRpml2fw/nnaowWRbT1NnWKV012fcXLGX5Hl9Mx525 YKBly7QMmuyqVeGt+2dboDqz8G1aILJN1a04clpgbYJygiY6dmPIrOu/ikJh0Isx 3lGo0pSZC7A322XZs7BlQC177tfvA+v1UM/A4PMhiFcggP1yRsG9RVIwpVnTBCEp zUfeFFVcSltDMeVcqYf3KpKBb45qmM1msLgFK2SHkIMYVkrNBFNgb4zM6f/KQbGR 4RDaUIRab6sZATJeN4tnzgloNlM= -----END CERTIFICATE-----Generated at Thu May 16 22:34:50 2024 by rpki-client on console-ams.rpki-client.org